Hi Goetz,

Am Samstag, 03. Feb 2007, 16:05:46 +0100 schrieb Goetz Babin-Ebell:
> Bertram Scharpf wrote:
> >   $ wc -c xxx
> >   118 xxx
> >   $ openssl rsautl -encrypt -certin <some.crt -in xxx
> >   RSA operation error
> >   5747:error:0406D06E:rsa routines:RSA_padding_add_PKCS1_type_2:data too 
> > large for key size:rsa_pk1.c:151:
> > 
> > With 117 Bytes it works here. How can I generally determine
> > what is the maximum a key is capable of?
> 
> Encrypting data directly with rsa has some security issues you have to
> understand unless you compromise the security of the key.

O, yes, I would like to understand them.

> If you can't figure out by yourself the maximum length of data you can
> encrypt with a given key using the rsautl comand,
> you shouldn't use it to encrypt data.

So what do I have to read?

> You should use the openssl smime command.

I'm using Ruby; S/MIME seems to be rather young here. At
least it is hidden properly well. I just found it.

Thanks so far,

Bertram


-- 
Bertram Scharpf
Stuttgart, Deutschland/Germany
http://www.bertram-scharpf.de
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to